5 commits

Author	SHA1	Message	Date
Joseph Schorr	c9812864be	Small JS fixes for the PR	2017-01-26 12:03:56 -05:00
Joseph Schorr	a9791ea419	Have external login always make an API request to get the authorization URL ... This makes the OIDC lookup lazy, ensuring that the rest of the registry and app continues working even if one OIDC provider goes down.	2017-01-23 19:06:19 -05:00
Joseph Schorr	19f7acf575	Lay foundation for truly dynamic external logins ... Moves all the external login services into a set of classes that share as much code as possible. These services are then registered on both the client and server, allowing us in the followup change to dynamically register new handlers	2017-01-20 15:21:08 -05:00
Joseph Schorr	ff52fde8a5	Have Quay always use an OAuth-specific CSRF token ... This change ensures that we always store and then check the contents of the OAuth `state` argument against a session-stored CSRF token. Fixes https://www.pivotaltracker.com/story/show/135803615	2016-12-08 16:11:57 -05:00
Joseph Schorr	c0286d1ac3	Add support for Dex to Quay ... Fixes #306 - Adds support for Dex as an OAuth external login provider - Adds support for OIDC in general - Extract out external logins on the JS side into a service - Add a feature flag for disabling direct login - Add support for directing to the single external login service - Does *not* yet support the config in the superuser tool	2015-09-04 17:05:06 -04:00